https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-4115.htmlhttps://patchthecve.com/cve/CVE-2021-4115.htmlWed, 17 Jun 2026 04:19:03 +0000MEDIUM 5.5: There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest threat from this vulnerability is to availability. NOTE: Polkit process outage duration is tied to the failing process being reaped and a new one being spawhttps://patchthecve.com/cve/CVE-2021-3560.htmlhttps://patchthecve.com/cve/CVE-2021-3560.htmlWed, 17 Jun 2026 04:05:20 +0000HIGH 7.8: It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulhttps://patchthecve.com/cve/CVE-2021-4034.htmlhttps://patchthecve.com/cve/CVE-2021-4034.htmlSat, 15 Aug 2026 04:17:57 +0000HIGH 7.8: A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count c